azuresql-db-ci
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [External Container Image Reference]: The skill references a container image located at
sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io/azure-sql/db-dev:latest. This image is hosted on an Azure Container Registry (ACR), which is a standard Microsoft-managed service. The skill correctly instructs users to use secret variables (ACR_USERNAME,ACR_PASSWORD) to handle authentication for this private registry. - [Command Execution Patterns]: The skill provides scripts for GitHub Actions and other CI environments that utilize
docker execandsqlcmdto provision and seed the database. These are standard practices for integration testing environments and are used here to initialize a local development database context. - [Data Ingestion Considerations]: The skill includes a step to seed the database by copying and executing a
seed.sqlfile. - Ingestion points: The
seed.sqlfile is copied into the container and executed viasqlcmdinSKILL.md. - Boundary markers: The skill relies on standard CI step isolation.
- Capability inventory: Uses
docker cp,docker exec, and shell commands for environment setup. - Sanitization: Standard SQL execution is performed; users should ensure the
seed.sqlcontent is sourced from trusted local files.
Audit Metadata